Legal commentary: Perturbation attacks may be covered under the CFAA as prosecutors could argue that the adversary knowingly transmitted code (in this case a modified image, which ultimately gets converted to code) that caused damage (in this case monetary damages suffered by the bank). By the same token, it can also be argued that tampering with stop signs in the context of autonomous cars is also a CFAA violation, since stickers (as seen in [1]} ) are a form of transmitting code that causes damage to the autonomous car (a computer in the eyes of CFAA).
